• https://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf
• https://www.dwheeler.com/trusting-trust/

Covers rebuilding of the Debian source packages.

Timestamps are the primary cause for the lack of reproducible builds.

• https://reproducible-builds.org/specs/source-date-epoch/

For JavaScript there is the following specification:

• https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity

• https://github.com/zaproxy/zaproxy
• https://www.gitbook.com/book/rubyfu/rubyfu/details

• history of the lisp machines
• some examples running through Guile
• `(+ 2 ,(+ 2 3))
• Sussman: initial lisp interpreter in Fortran by McCarthy
• https://www.gnu.org/software/8sync/